$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft File: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft (raw, json) Hash identifier: H+OSEGw8RUzYtdFkp/if8iEutSjgAZiTRJlqMcA2MA8= Subject key identifier: B1:1B:D4:0D:4D:D8:4E:CC:9E:72:0C:A4:58:B9:28:C2:29:BB:61:0C Authority key identifier: D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A Certificate issuer: /CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Certificate serial: 33B2E359FB2355156809280423AB6935FE8D3A3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 00:40:04 +0000 Manifest this update: Sun 15 Nov 2026 00:35:04 +0000 Manifest next update: Mon 16 Nov 2026 01:09:04 +0000 Files and hashes: 1: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: oPoNFbylWE3wDnquzh9cCts/g1mAJ32eRWzuqQ1Bx0w=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: Y/EQKcpkANIA0psSjIaznqwzitz7bm3TFARBNjc3Kms=) 3: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl (hash: dk4pKM8YaoNTDI1vrXRe7+NXFBIXnBiism3mOIIuJxo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 01:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b2:e3:59:fb:23:55:15:68:09:28:04:23:ab:69:35:fe:8d:3a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Validity Not Before: Nov 15 00:35:04 2026 GMT Not After : Nov 16 01:09:04 2026 GMT Subject: CN=B11BD40D4DD84ECC9E720CA458B928C229BB610C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:9a:11:54:ef:c4:90:60:6c:bc:d4:b8:94: 5b:6b:17:37:ea:b3:d5:e8:ba:24:4a:92:11:c4:da: 00:20:9c:ff:b1:28:d8:89:7f:4d:20:07:24:f4:5f: ee:b4:af:60:06:44:3f:38:20:ca:f2:7e:d2:46:0e: 34:84:ba:fa:91:97:ee:a1:56:3e:6b:56:6d:89:42: 36:28:2e:72:55:39:40:35:d5:e1:16:ee:bb:e2:93: 7a:3b:ba:c5:79:b9:97:53:39:7f:6f:83:df:c4:78: 67:7a:58:1c:3e:02:07:01:78:6f:9e:04:c3:fe:68: e7:eb:3c:09:70:b1:fe:3e:9e:15:cb:2b:2d:7a:23: f7:47:f7:09:f4:c1:3a:68:38:a6:28:2e:b5:d2:55: 45:f2:f5:f9:ac:0d:8b:c2:71:7d:90:b8:c9:b6:a3: 04:83:e2:40:8d:d4:16:6a:39:58:52:7f:0b:56:1b: d6:12:81:e5:0d:c9:7e:29:84:61:ee:d1:c3:bb:a5: 97:e5:0c:15:39:64:50:79:ad:0a:ea:6c:a4:1e:72: 78:e6:89:26:1e:01:1b:9e:24:91:71:28:d1:b2:30: e8:08:46:a8:b9:6e:72:0e:eb:16:c4:cb:6b:91:cb: 15:94:6e:8a:3f:30:f8:6c:af:c6:b0:c5:bb:ea:d5: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1B:D4:0D:4D:D8:4E:CC:9E:72:0C:A4:58:B9:28:C2:29:BB:61:0C X509v3 Authority Key Identifier: keyid:D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ee:e4:3b:de:26:6a:6d:1b:75:83:d3:cf:81:93:55:10:d5: fe:df:c5:23:ec:4a:b3:2b:9e:2a:4d:2e:6a:19:74:89:5a:ea: 58:0a:ba:1f:30:3f:25:62:88:4d:83:75:2c:0a:2c:1e:c3:22: e8:29:09:05:88:2f:dd:9d:75:60:ee:75:00:6c:57:83:2d:ae: 00:02:63:91:19:3e:0f:c0:a0:30:01:d8:01:ec:e8:c3:46:d0: b2:ad:cc:28:56:5e:d7:6f:ed:48:fb:d1:55:4f:06:81:87:5a: 7f:47:77:a2:71:4e:de:22:63:59:df:55:fe:05:00:c5:ac:d6: 76:b9:a8:00:f5:42:98:29:30:1b:86:11:73:d0:54:7e:eb:a6: 09:6f:42:84:fc:e9:6c:66:5e:bb:5d:1f:dd:1b:79:fb:e3:fc: 2d:32:06:cd:fe:b8:99:b8:3c:fc:9d:04:8f:c9:5a:5e:11:0c: 48:c9:4c:d0:c1:bb:a4:e5:6c:8d:fe:93:8d:ee:d9:d5:64:8a: 10:8e:a6:ef:fc:3f:c1:82:c9:c6:3c:0e:01:3e:f0:8c:1a:43: a2:f5:48:77:33:3e:3a:52:af:4e:61:7f:77:c8:49:f3:88:ca: 73:0e:e6:f8:9a:12:a5:94:a5:f7:36:8a:9a:a7:ac:69:32:92: 8d:50:8e:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7LjWfsjVRVoCSgEI6tpNf6NOjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3 Q0M4RTAxQTAeFw0yNjExMTUwMDM1MDRaFw0yNjExMTYwMTA5MDRaMDMxMTAvBgNV BAMTKEIxMUJENDBENEREODRFQ0M5RTcyMENBNDU4QjkyOEMyMjlCQjYxMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdZoRVO/EkGBsvNS4lFtrFzfq s9XouiRKkhHE2gAgnP+xKNiJf00gByT0X+60r2AGRD84IMryftJGDjSEuvqRl+6h Vj5rVm2JQjYoLnJVOUA11eEW7rvik3o7usV5uZdTOX9vg9/EeGd6WBw+AgcBeG+e BMP+aOfrPAlwsf4+nhXLKy16I/dH9wn0wTpoOKYoLrXSVUXy9fmsDYvCcX2QuMm2 owSD4kCN1BZqOVhSfwtWG9YSgeUNyX4phGHu0cO7pZflDBU5ZFB5rQrqbKQecnjm iSYeARueJJFxKNGyMOgIRqi5bnIO6xbEy2uRyxWUboo/MPhsr8awxbvq1dXzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsRvUDU3YTsyecgykWLkowim7YQwwHwYDVR0j BBgwFoAU2F3cvlvXWlDbD5+ZFhI76XzI4BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVhYjBhMDEtOGVlNC00ODI1LTg0MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1 QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3Q0M4RTAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVERENCRTVCRDc1QTUwREIwRjlGOTkxNjEyM0JFOTdDQzhF MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNC RTk3Q0M4RTAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPu5DveJmptG3WD08+Bk1UQ1f7fxSPsSrMr nipNLmoZdIla6lgKuh8wPyViiE2DdSwKLB7DIugpCQWIL92ddWDudQBsV4MtrgAC Y5EZPg/AoDAB2AHs6MNG0LKtzChWXtdv7Uj70VVPBoGHWn9Hd6JxTt4iY1nfVf4F AMWs1na5qAD1QpgpMBuGEXPQVH7rpglvQoT86WxmXrtdH90befvj/C0yBs3+uJm4 PPydBI/JWl4RDEjJTNDBu6TlbI3+k43u2dVkihCOpu/8P8GCycY8DgE+8IwaQ6L1 SHczPjpSr05hf3fISfOIynMO5viaEqWUpfc2ipqnrGkyko1QjgY= -----END CERTIFICATE-----Generated at Sun Nov 15 14:44:23 2026 by rpki-client